WordPress.org

Security Scorecard

Score

29C

Total CVEs

540

Patch Rate

20%

106 patched

Avg Response

43d

days to patch

Critical Gaps

9

exploitable, no detection

Severity Breakdown

Critical9
High40
Medium489
Low2

Patch Status

Patched106 (20%)
Partial/Workaround0 (0%)
Unpatched434 (80%)

CVEs (632)

CVE IDTitleSeverityScoreDaysPatch
CVE-2025-12177Download Manager Plugin VulnerabilityMEDIUM5.338dUnpatched
CVE-2025-12064WP2Social Auto Publish Plugin VulnerabilityMEDIUM6.138dUnpatched
CVE-2025-11980SQL Injection in Quick Featured Images WordPress PluginMEDIUM4.938dUnpatched
CVE-2025-11748WordPress Groups Plugin VulnerabilityMEDIUM4.338dUnpatched
CVE-2025-12583Simple Downloads List Plugin VulnerabilityMEDIUM6.438dUnpatched
CVE-2025-4522IDonate VulnerabilityMEDIUM6.5-Patched
CVE-2025-12527Page & Post Notes Plugin VulnerabilityMEDIUM4.339dUnpatched
CVE-2025-62030td-composerMEDIUM6.540dPatched
CVE-2025-62033Togo Togo Broken Access Control VulnerabilityMEDIUM6.540dPatched
CVE-2025-12560Blog2Social VulnerabilityMEDIUM5.340dUnpatched